Cyber Security Project Engineer

HRB; Chantilly (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Armison Tech is seeking a Cyber Security Project Engineer to join our team in Chantilly, VA, on-site. You will conduct technical risk assessments across IT, cloud, and mobile networks while guiding mitigation strategies and security postures for government-focused projects.

The role requires active TS/SCI clearance with polygraph, experience with vulnerability analyses, and proficiency with tools like Xacta, NIST-based controls, and SIEM platforms. Excellent benefits accompany this position.

Qualifications

• Active TS/SCI with polygraph clearance required.
• Experience analyzing IT systems for cybersecurity vulnerabilities.
• Experience conducting technical risk assessments across IT systems, cloud platforms, and mobile networks.
• Experience analyzing vulnerabilities with tools like Nmap, Wireshark, Metasploit and others, as well as experience recommending mitigations.
• Experience evaluating system configurations, procurement processes, and software origins to determine and analyze security postures.
• Experience documenting risks and threat vectors in structured reports for decision-makers.
• Experience exploiting system vulnerabilities and simulating real-world attack scenarios to assess resilience.
• Experience providing guidance on encryption, PKI, VPNs, and secure data transfer protocols.
• Experience developing and maintaining SSPs, POA&Ms, and continuous monitoring plans.
• Experience using tools like Xacta, ServiceNow, and RSA Archer to manage A&A artifacts.
• Experience implementing Zero Trust Architecture and secure data lifecycle management.
• Experience monitoring logs and alerts using Splunk, Rapid7, Nessus, and other security tools.

Responsibilities

• Conduct technical risk assessments and provide risk mitigation guidance for enterprise and mission systems.
• Analyze IT, cloud, and network environments to support security postures.
• Develop and maintain security documentation (SSPs, POA&Ms) and A&A artifacts.
• Collaborate with stakeholders to implement Zero Trust and secure data lifecycle practices.
• Monitor and respond to security events using SIEM tools.

Skills

TS/SCI clearance

Vulnerability analysis

Risk assessment

Threat modeling

Security controls

Tools

Nmap

Wireshark

Metasploit

Xacta

ServiceNow

RSA Archer

Zero Trust

Splunk

Rapid7

Nessus

Job description

Armison Tech is a minority owned small business, established in 2012, located in the Northern Virginia area. We're a company predominantly focused on cyber security for our government customers yet our expertise in other areas include big data analytics, instructional design, information management, and computer network infrastructure. We invest in our employees careers by participating in cutting edge cyber security training and attending industry leading conferences. As a small business we offer flexibility and powerful benefits supporting our most important assets, our employees and their families.

Armison Tech is a minority owned small business, established in 2012, located in the Northern Virginia area. We're a company predominantly focused on cyber security for our government customers yet our expertise in other areas include big data analytics, instructional design, information management, and computer network infrastructure. We invest in our employees careers by participating in cutting edge cyber security training and attending industry leading conferences. As a small business we offer flexibility and powerful benefits supporting our most important assets, our employees and their families.

Armison Tech is constantly searching for exceptionally qualified technology professionals who would make a great addition to our team. Our staff, just like our clients and the work we do, is what makes Armison Tech a truly effective partner. As we help each of our new employees make adjustments to our operational methods, we make sure every professional is able to handle the workload of each project by resolving any relevant concerns or issues they may have relating to this recent career shift.

Our hiring process seeks to accentuate the raw talent and skill-set of our team members. Along with the importance of experience and education, Armison Tech looks for the superior analytical and communication ability that separates our employees from what we’ve seen while working with some similar companies. Individuals we employ must have a demonstrated ability to excel in high-pressure situations which have a real impact on the modern world so we can continue to keep pace with the competition and the evolving fields of technology.

Currently we have an immediate need to add an experienced:

Cyber Security Project Engineer

Location: Chantilly, VA(on-site client environment)

Clearance: TS/SCI with polygraph

Compensation: Competitive, Excellent Benefits

Only applicants with the active required security clearance and are U.S. Citizens will be reviewed.

You will be supporting a diverse set of goals across the organization by conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies. You will provide subject matter expertise in technical risk analysis of enterprise and mission systems, IT systems and networks, mobile and wireless networks, cloud-based computing, and scripting or programming products.

Required Qualifications:

• Must maintain active/current TS/SCI with a polygraph clearance.
• Demonstrated experience analyzing IT systems for cyber security vulnerabilities.
• Experience conducting technical risk assessments across IT systems, cloud platforms, and mobile networks.
• Experience analyzing vulnerabilities with tools like Nmap, Wireshark, Metasploit and others, as well as experience recommending mitigations.
• Experience evaluating system configurations, procurement processes, and software origins to determine and analyze security postures.
• Experience documenting risks and threat vectors in structured reports for decision-makers.
• Experience exploiting system vulnerabilities and simulating real-world attack scenarios to assess resilience.
• Experience providing guidance on encryption, PKI, VPNs, and secure data transfer protocols.
• Experience developing and maintaining SSPs, POA&Ms, and continuous monitoring plans.
• Experience using tools like Xacta, ServiceNow, and RSA Archer to manage A&A artifacts.
• Experience implementing Zero Trust Architecture and secure data lifecycle management.
• Experience monitoring logs and alerts using Splunk, Rapid7, Nessus, and other security tools.

The duties and responsibilities listed in this job description generally cover the nature and level of work being performed by individuals assigned to this position. This is not intended to be a complete list of all duties, responsibilities, and skills required. Subject to the terms of an applicable collective bargaining agreement, the company management reserves the right to modify, add, or remove duties and to assign other duties as may be necessary. We wish to thank all applicants for their interest and effort in applying for the position; however, only candidates selected for interviews will be contacted.

Armison Tech is an equal opportunity employer. All applicants will receive consideration for employment, without regard to race, color, religion, creed, national origin, gender or gender-identity, age, marital status, sexual orientation, veteran status, disability, pregnancy or parental status, or any other basis prohibited by law.